Description
index.php in myWebland myBloggie 2.1.4 and earlier allows remote attackers to obtain sensitive information via a query that only specifies the viewdate mode, which reveals the table prefix in a SQL error message.
References
- ADV-2006-3179 vdb-entry
- 20060805 MyBloggie <= 2.1.4 trackback.php SQL injection / admin credentials disclosure mailing-list
- 2118 exploit
- 21376 third-party-advisory
- mybloggie-index-information-disclosure(28242) vdb-entry
- 1347 third-party-advisory
- http://retrogod.altervista.org/mybloggie_214_sql.html